Overview

overview

4

Static

static

4

c6a292475f...1N.pdf

windows7-x64

3

c6a292475f...1N.pdf

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6a292475f50c84a3a87b6df69002a8d6bfdcc6206d3b9b53d9bb2d50b5eb781N.pdf

  • Size

    235KB

  • MD5

    42af06c23f49946132386f130d12a170

  • SHA1

    cd1436fbc7f476a8b79ea95df0bfb9555ec86292

  • SHA256

    c6a292475f50c84a3a87b6df69002a8d6bfdcc6206d3b9b53d9bb2d50b5eb781

  • SHA512

    9e392117382ca2683bb0fce11bce29b174722357fe41484f6aac421feb8dcef771dd024bd4af320b5b509a54e9ec039f408db813e678517441ae4befd7228a70

  • SSDEEP

    6144:wCeKQiUJOpbz8x+CnG33Z1gPbH0+duK3Ooc:wvKr1zjCG33ZejsaOoc

Score
4/10
pdflinkqr

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

    pdflink
  • PDF has QR code that contains a HTTP URL

    PDFs with URL QR codes are often used for phishing

    pdfqr
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • c6a292475f50c84a3a87b6df69002a8d6bfdcc6206d3b9b53d9bb2d50b5eb781N.pdf
    .pdf

    • http://undocs.org/A/RES/71/321

    • https://undocs.org/sp/A/66/53/Add.1)A),),5),m),),n),e),u),,),n),s),),),o),e),o),e),o),s),a),S),l),e),G),e),m),A),l),d),e),i),f),s),n),u),D),s)

    • https://undocs.org/sp/A/70/84-E/2015/76

    • https://undocs.org/sp/A/70/990

    • https://undocs.org/sp/A/71/L.82

    • https://undocs.org/sp/A/HRC/21/24

    • https://undocs.org/sp/A/RES/18/8

    • https://undocs.org/sp/A/RES/21/24

    • https://undocs.org/sp/A/RES/61/295

    • Show all